Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays
Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.
AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.
S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.
AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#risk management
115 posts
AI Credential Risk: The Gap CISOs Are Missing
CISOs focus on prompt security while AI agents quietly accumulate dangerous credentials. Learn why traditional access controls fail with AI and how to build a credential inventory.
Beyond Quantum Threats: The Real Opportunity
While executives obsess over quantum encryption threats, the transformative potential of quantum computing in solving century-old problems like nitrogen fixation and drug discovery remains overlooked.
Quantum Threats: Why Your Encrypted Data Isn't Safe
Patient adversaries are harvesting encrypted data today to decrypt later when quantum attacks become cheap. Learn where your organization sits on the target list.
AI Security: Why Operational Hygiene Beats Capability
Anthropic's breached deployment reveals a critical lesson: sophisticated AI means nothing without basic security practices. Real security requires transparent systems, not vendor promises.
Quantum Cryptography: Beyond Nation-State Economics
RSA-2048 attacks follow exponential cost curves like all technologies. As quantum computing costs plummet, your organization moves from safe to vulnerable—not if, but when.
AI Governance: Balance Adoption and Risk
Leaders face competing pressures on AI: boards demand adoption, risk committees demand controls. Learn how to govern AI as a critical dependency, not a strategic choice.
The Real Risk: Data Retention, Not the Breach
Breaches grab headlines, but outdated data retention policies are the real vulnerability. Learn why deletion is harder than storage—and what leaders must audit now.
DeFi Security Failures: When Guidelines Aren't Enforced
Kelp DAO's $292M loss reveals why security checklists fail: published guidance without enforcement is just a prayer. Learn what financial leaders must verify before DeFi exposure.
AI Security Just Became a Budget Problem
Anthropic's breakthrough shows cybersecurity now runs on compute economics, not architecture. CISOs must shift from design to capital planning.
Quantum Risk: Protecting Trade Secrets Now
Trade secrets have indefinite value. Harvest-now-decrypt-later attacks mean your unencrypted data is vulnerable today. Learn why migration timelines matter.
Post-Quantum Cryptography: Why Your Migration Timeline Is Already Tight
Employee PII faces a 10-year sensitivity window. Q-Day uncertainty means you should start cryptographic migration now—waiting for certainty guarantees you'll be late.
Navigating AI Risk: The Third Path Beyond Speed vs. Caution
Across three tech disruption cycles, organizations that balanced aggressive innovation with responsible guardrails outperformed both speed-first and caution-first competitors. Here's what that means for AI.